BiKi Password Tampering - Revision history

Azoundria at 19:01, 1 May 2023

2023-05-01T19:01:05Z

← Older revision		Revision as of 13:01, 1 May 2023
Line 1:		Line 1:
	{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/bikipasswordtampering.php}}		{{Imported Case Study 2\|source=https://www.quadrigainitiative.com/casestudy/bikipasswordtampering.php}}
	{{Unattributed ~~Citations~~}}		{{Unattributed Sources}}

	[[File:Biki.jpg\|thumb\|BiKi]]While details are vague, it appears that some customer accounts were breached, potentially a handful of accounts with SMS two-factor authentication. Funds were withdrawn from the accounts.		[[File:Biki.jpg\|thumb\|BiKi]]While details are vague, it appears that some customer accounts were breached, potentially a handful of accounts with SMS two-factor authentication. Funds were withdrawn from the accounts.
Line 6:		Line 6:
	BiKi has fully compensated the customers and improved security.		BiKi has fully compensated the customers and improved security.

	This exchange or platform is based in Singapore, or the incident targeted people primarily in Singapore.		This exchange or platform is based in Singapore, or the incident targeted people primarily in Singapore.<ref name="slowmisthacked-1160" /><ref name="businesswire-2259" /><ref name="coinmarketcap-2260" /><ref name="blocking-2261" /><ref name="8btc-2257" /><ref name="reddit-2262" /><ref name="bikisupport-2263" /><ref name="doveywantwitter-2264" /><ref name="coyotlcompanytwitter-2265" /><ref name="coincodex-2266" /><ref name="roilandmarktwitter-2267" /><ref name="fxxxx888twitter-2268" /><ref name="warairelationtwitter-2269" /><ref name="coinpost-2270" /><ref name="bikiblog-2271" /><ref name="bikiarchive-2272" /><ref name="cryptoxdirectory-2276" />
	<ref name="slowmisthacked-1160" /><ref name="businesswire-2259" /><ref name="coinmarketcap-2260" /><ref name="blocking-2261" /><ref name="8btc-2257" /><ref name="reddit-2262" /><ref name="bikisupport-2263" /><ref name="doveywantwitter-2264" /><ref name="coyotlcompanytwitter-2265" /><ref name="coincodex-2266" /><ref name="roilandmarktwitter-2267" /><ref name="fxxxx888twitter-2268" /><ref name="warairelationtwitter-2269" /><ref name="coinpost-2270" /><ref name="bikiblog-2271" /><ref name="bikiarchive-2272" /><ref name="cryptoxdirectory-2276" />

	== About BiKi ==		== About BiKi ==
Line 59:		Line 58:
	!Description		!Description
	\|-		\|-
	\|March 26th, 2019 ~~12:00:00 AM~~		\|March 26th, 2019
	\|Main Event		\|Main Event
	\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.		\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
Line 67:		Line 66:
	\|		\|
	\|}		\|}

			== Technical Details ==
			This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

	== Total Amount Lost ==		== Total Amount Lost ==
Line 86:		Line 88:
	== Ongoing Developments ==		== Ongoing Developments ==
	What parts of this case are still remaining to be concluded?		What parts of this case are still remaining to be concluded?
			== General Prevention Policies ==
	== Prevention Policies ==
	While the exact details are vague, it would appear that the authentication factors used SMS-based verification, which is known to be vulnerable to SIM swapping.		While the exact details are vague, it would appear that the authentication factors used SMS-based verification, which is known to be vulnerable to SIM swapping.

	There were no user funds lost in this case.		There were no user funds lost in this case.
			== Individual Prevention Policies ==
			{{Prevention:Individuals:Placeholder}}

			{{Prevention:Individuals:End}}

			== Platform Prevention Policies ==
			{{Prevention:Platforms:Placeholder}}

			{{Prevention:Platforms:End}}

			== Regulatory Prevention Policies ==
			{{Prevention:Regulators:Placeholder}}

			{{Prevention:Regulators:End}}

	== References ==		== References ==
	<references><ref name="slowmisthacked-1160">[https://hacked.slowmist.io/en/?c=Exchange SlowMist Hacked - SlowMist Zone] (Jun 25, 2021)</ref>		<references><ref name="slowmisthacked-1160">[https://hacked.slowmist.io/en/?c=Exchange SlowMist Hacked - SlowMist Zone] (Jun 26, 2021)</ref>

	<ref name="businesswire-2259">[https://www.businesswire.com/news/home/20200322005055/en/BiKi.com-Lists-Largest-Decentralized-Stablecoin-DAI BiKi.com Lists Largest Decentralized Stablecoin DAI \| Business Wire] (Aug 6, 2021)</ref>		<ref name="businesswire-2259">[https://www.businesswire.com/news/home/20200322005055/en/BiKi.com-Lists-Largest-Decentralized-Stablecoin-DAI BiKi.com Lists Largest Decentralized Stablecoin DAI \| Business Wire] (Aug 7, 2021)</ref>

	<ref name="coinmarketcap-2260">[https://coinmarketcap.com/exchanges/biki/ BiKi trade volume and market listings \| CoinMarketCap] (Aug 6, 2021)</ref>		<ref name="coinmarketcap-2260">[https://coinmarketcap.com/exchanges/biki/ BiKi trade volume and market listings \| CoinMarketCap] (Aug 7, 2021)</ref>

	<ref name="blocking-2261">[https://blocking.net/464/how-hard-is-it-to-lose-money-on-the-exchange-and-how-to-recover-bitcoin-digital-assets/ How hard is it to lose money on the exchange and how to recover bitcoin digital assets? Blockchain Network] (Aug 6, 2021)</ref>		<ref name="blocking-2261">[https://blocking.net/464/how-hard-is-it-to-lose-money-on-the-exchange-and-how-to-recover-bitcoin-digital-assets/ How hard is it to lose money on the exchange and how to recover bitcoin digital assets? Blockchain Network] (Aug 7, 2021)</ref>

	<ref name="8btc-2257">[https://news.8btc.com/dragonex-hacked-investigation-is-undergoing DragonEx Hacked, Investigation is Undergoing \| NEWS.8BTC.COM] (Aug 6, 2021)</ref>		<ref name="8btc-2257">[https://news.8btc.com/dragonex-hacked-investigation-is-undergoing DragonEx Hacked, Investigation is Undergoing \| NEWS.8BTC.COM] (Aug 7, 2021)</ref>

	<ref name="reddit-2262">[https://www.reddit.com/r/Bitcoin/comments/bb2qkb/exchange_bikicom_was_hacked_by_side_channel/ Exchange Biki.com was hacked by side channel attack via SMS hijacking : Bitcoin] (Aug 6, 2021)</ref>		<ref name="reddit-2262">[https://www.reddit.com/r/Bitcoin/comments/bb2qkb/exchange_bikicom_was_hacked_by_side_channel/ Exchange Biki.com was hacked by side channel attack via SMS hijacking : Bitcoin] (Aug 7, 2021)</ref>

	<ref name="bikisupport-2263">[https://support.biki.cc/hc/en-us/articles/360015039212 About Us – Help Center] (Aug 6, 2021)</ref>		<ref name="bikisupport-2263">[https://support.biki.cc/hc/en-us/articles/360015039212 About Us – Help Center] (Aug 7, 2021)</ref>

	<ref name="doveywantwitter-2264">[https://twitter.com/DoveyWan/status/1115286361253105664 @DoveyWan Twitter] (Aug 6, 2021)</ref>		<ref name="doveywantwitter-2264">[https://twitter.com/DoveyWan/status/1115286361253105664 @DoveyWan Twitter] (Aug 7, 2021)</ref>

	<ref name="coyotlcompanytwitter-2265">[https://twitter.com/CoyotlCompany/status/1115527104022577152 @CoyotlCompany Twitter] (Aug 6, 2021)</ref>		<ref name="coyotlcompanytwitter-2265">[https://twitter.com/CoyotlCompany/status/1115527104022577152 @CoyotlCompany Twitter] (Aug 7, 2021)</ref>

	<ref name="coincodex-2266">[https://coincodex.com/review/9115/biki-review/ BiKi Review \| CoinCodex] (Aug 7, 2021)</ref>		<ref name="coincodex-2266">[https://coincodex.com/review/9115/biki-review/ BiKi Review \| CoinCodex] (Aug 8, 2021)</ref>

	<ref name="roilandmarktwitter-2267">[https://twitter.com/roi_landmark/status/1110486702148059143 @roi_landmark Twitter] (Aug 7, 2021)</ref>		<ref name="roilandmarktwitter-2267">[https://twitter.com/roi_landmark/status/1110486702148059143 @roi_landmark Twitter] (Aug 8, 2021)</ref>

	<ref name="fxxxx888twitter-2268">[https://twitter.com/FXxxx888/status/1110881923587407872 @FXxxx888 Twitter] (Aug 7, 2021)</ref>		<ref name="fxxxx888twitter-2268">[https://twitter.com/FXxxx888/status/1110881923587407872 @FXxxx888 Twitter] (Aug 8, 2021)</ref>

	<ref name="warairelationtwitter-2269">[https://twitter.com/warai_relation/status/1111398122469482498 @warai_relation Twitter] (Aug 7, 2021)</ref>		<ref name="warairelationtwitter-2269">[https://twitter.com/warai_relation/status/1111398122469482498 @warai_relation Twitter] (Aug 8, 2021)</ref>

	<ref name="coinpost-2270">[https://coinpost.jp/?p=76726 仮想通貨取引所「BiKi.com」の顧客口座乗っ取り　事例から見る対策手段【独自考察】] (Aug 7, 2021)</ref>		<ref name="coinpost-2270">[https://coinpost.jp/?p=76726 仮想通貨取引所「BiKi.com」の顧客口座乗っ取り　事例から見る対策手段【独自考察】] (Aug 8, 2021)</ref>

	<ref name="bikiblog-2271">[https://blog.biki.com/biki-is-one-of-the-top-cryptocurrency-exchanges-of-2019/ BiKi is one of the top cryptocurrency exchanges of 2019 - BiKi Exchange] (Aug 7, 2021)</ref>		<ref name="bikiblog-2271">[https://blog.biki.com/biki-is-one-of-the-top-cryptocurrency-exchanges-of-2019/ BiKi is one of the top cryptocurrency exchanges of 2019 - BiKi Exchange] (Aug 8, 2021)</ref>

	<ref name="bikiarchive-2272">[https://web.archive.org/web/20190404015649/https://www.biki.com/ No Title] (Aug 7, 2021)</ref>		<ref name="bikiarchive-2272">[https://web.archive.org/web/20190404015649/https://www.biki.com/ No Title] (Aug 8, 2021)</ref>

	<ref name="cryptoxdirectory-2276">[https://cryptoxdirectory.com/hacked_2019 The 23 exchange hacks of 2019] (Aug 7, 2021)</ref></references>		<ref name="cryptoxdirectory-2276">[https://cryptoxdirectory.com/hacked_2019 The 23 exchange hacks of 2019] (Aug 8, 2021)</ref></references>

Azoundria at 08:02, 17 February 2023

2023-02-17T08:02:06Z

← Older revision		Revision as of 02:02, 17 February 2023
Line 1:		Line 1:
	{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/bikipasswordtampering.php}}		{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/bikipasswordtampering.php}}
			{{Unattributed Citations}}

	[[File:Biki.jpg\|thumb\|BiKi]]While details are vague, it appears that some customer accounts were breached, potentially a handful of accounts with SMS two-factor authentication. Funds were withdrawn from the accounts.		[[File:Biki.jpg\|thumb\|BiKi]]While details are vague, it appears that some customer accounts were breached, potentially a handful of accounts with SMS two-factor authentication. Funds were withdrawn from the accounts.
Line 6:		Line 7:

	This exchange or platform is based in Singapore, or the incident targeted people primarily in Singapore.		This exchange or platform is based in Singapore, or the incident targeted people primarily in Singapore.
			<ref name="slowmisthacked-1160" /><ref name="businesswire-2259" /><ref name="coinmarketcap-2260" /><ref name="blocking-2261" /><ref name="8btc-2257" /><ref name="reddit-2262" /><ref name="bikisupport-2263" /><ref name="doveywantwitter-2264" /><ref name="coyotlcompanytwitter-2265" /><ref name="coincodex-2266" /><ref name="roilandmarktwitter-2267" /><ref name="fxxxx888twitter-2268" /><ref name="warairelationtwitter-2269" /><ref name="coinpost-2270" /><ref name="bikiblog-2271" /><ref name="bikiarchive-2272" /><ref name="cryptoxdirectory-2276" />

	== About BiKi ==		== About BiKi ==
Line 37:		Line 39:

	Don't Include:		Don't Include:

	* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.		* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
	* Anything that wasn't reasonably knowable at the time of the event.		* Anything that wasn't reasonably knowable at the time of the event.
Line 59:		Line 60:
	\|-		\|-
	\|March 26th, 2019 12:00:00 AM		\|March 26th, 2019 12:00:00 AM
	\|~~First~~ Event		\|Main Event
	\|~~This is an expanded~~ description of what happened and the impact. If multiple lines are necessary, add them here.		\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
	\|-
	\|
	\|
	\|
	\|-		\|-
	\|		\|
Line 72:		Line 69:

	== Total Amount Lost ==		== Total Amount Lost ==
	The total amount lost ~~is unknown~~.		The total amount lost has been estimated at $123,000 USD.

	How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?		How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?
Line 83:		Line 80:

	== Total Amount Recovered ==		== Total Amount Recovered ==
	~~It is unknown how much was~~ recovered.		There do not appear to have been any funds recovered in this case.

	What funds were recovered? What funds were reimbursed for those affected users?		What funds were recovered? What funds were reimbursed for those affected users?
Line 96:		Line 93:

	== References ==		== References ==
	[https://hacked.slowmist.io/en/?c=Exchange SlowMist Hacked - SlowMist Zone] (Jun 25)		<references><ref name="slowmisthacked-1160">[https://hacked.slowmist.io/en/?c=Exchange SlowMist Hacked - SlowMist Zone] (Jun 25, 2021)</ref>

	[https://www.businesswire.com/news/home/20200322005055/en/BiKi.com-Lists-Largest-Decentralized-Stablecoin-DAI BiKi.com Lists Largest Decentralized Stablecoin DAI \| Business Wire] (Aug 6)		<ref name="businesswire-2259">[https://www.businesswire.com/news/home/20200322005055/en/BiKi.com-Lists-Largest-Decentralized-Stablecoin-DAI BiKi.com Lists Largest Decentralized Stablecoin DAI \| Business Wire] (Aug 6, 2021)</ref>

	[https://coinmarketcap.com/exchanges/biki/ BiKi trade volume and market listings \| CoinMarketCap] (Aug 6)		<ref name="coinmarketcap-2260">[https://coinmarketcap.com/exchanges/biki/ BiKi trade volume and market listings \| CoinMarketCap] (Aug 6, 2021)</ref>

	[https://blocking.net/464/how-hard-is-it-to-lose-money-on-the-exchange-and-how-to-recover-bitcoin-digital-assets/ How hard is it to lose money on the exchange and how to recover bitcoin digital assets? Blockchain Network] (Aug 6)		<ref name="blocking-2261">[https://blocking.net/464/how-hard-is-it-to-lose-money-on-the-exchange-and-how-to-recover-bitcoin-digital-assets/ How hard is it to lose money on the exchange and how to recover bitcoin digital assets? Blockchain Network] (Aug 6, 2021)</ref>

	[https://news.8btc.com/dragonex-hacked-investigation-is-undergoing DragonEx Hacked, Investigation is Undergoing \| NEWS.8BTC.COM] (Aug 6)		<ref name="8btc-2257">[https://news.8btc.com/dragonex-hacked-investigation-is-undergoing DragonEx Hacked, Investigation is Undergoing \| NEWS.8BTC.COM] (Aug 6, 2021)</ref>

	[https://www.reddit.com/r/Bitcoin/comments/bb2qkb/exchange_bikicom_was_hacked_by_side_channel/ Exchange Biki.com was hacked by side channel attack via SMS hijacking : Bitcoin] (Aug 6)		<ref name="reddit-2262">[https://www.reddit.com/r/Bitcoin/comments/bb2qkb/exchange_bikicom_was_hacked_by_side_channel/ Exchange Biki.com was hacked by side channel attack via SMS hijacking : Bitcoin] (Aug 6, 2021)</ref>

	[https://support.biki.cc/hc/en-us/articles/360015039212 About Us – Help Center] (Aug 6)		<ref name="bikisupport-2263">[https://support.biki.cc/hc/en-us/articles/360015039212 About Us – Help Center] (Aug 6, 2021)</ref>

	[https://twitter.com/DoveyWan/status/1115286361253105664 @DoveyWan Twitter] (Aug 6)		<ref name="doveywantwitter-2264">[https://twitter.com/DoveyWan/status/1115286361253105664 @DoveyWan Twitter] (Aug 6, 2021)</ref>

	[https://twitter.com/CoyotlCompany/status/1115527104022577152 @CoyotlCompany Twitter] (Aug 6)		<ref name="coyotlcompanytwitter-2265">[https://twitter.com/CoyotlCompany/status/1115527104022577152 @CoyotlCompany Twitter] (Aug 6, 2021)</ref>

	[https://coincodex.com/review/9115/biki-review/ BiKi Review \| CoinCodex] (Aug 7)		<ref name="coincodex-2266">[https://coincodex.com/review/9115/biki-review/ BiKi Review \| CoinCodex] (Aug 7, 2021)</ref>

	[https://twitter.com/roi_landmark/status/1110486702148059143 @roi_landmark Twitter] (Aug 7)		<ref name="roilandmarktwitter-2267">[https://twitter.com/roi_landmark/status/1110486702148059143 @roi_landmark Twitter] (Aug 7, 2021)</ref>

	[https://twitter.com/FXxxx888/status/1110881923587407872 @FXxxx888 Twitter] (Aug 7)		<ref name="fxxxx888twitter-2268">[https://twitter.com/FXxxx888/status/1110881923587407872 @FXxxx888 Twitter] (Aug 7, 2021)</ref>

	[https://twitter.com/warai_relation/status/1111398122469482498 @warai_relation Twitter] (Aug 7)		<ref name="warairelationtwitter-2269">[https://twitter.com/warai_relation/status/1111398122469482498 @warai_relation Twitter] (Aug 7, 2021)</ref>

	[https://coinpost.jp/?p=76726 仮想通貨取引所「BiKi.com」の顧客口座乗っ取り　事例から見る対策手段【独自考察】] (Aug 7)		<ref name="coinpost-2270">[https://coinpost.jp/?p=76726 仮想通貨取引所「BiKi.com」の顧客口座乗っ取り　事例から見る対策手段【独自考察】] (Aug 7, 2021)</ref>

	[https://blog.biki.com/biki-is-one-of-the-top-cryptocurrency-exchanges-of-2019/ BiKi is one of the top cryptocurrency exchanges of 2019 - BiKi Exchange] (Aug 7)		<ref name="bikiblog-2271">[https://blog.biki.com/biki-is-one-of-the-top-cryptocurrency-exchanges-of-2019/ BiKi is one of the top cryptocurrency exchanges of 2019 - BiKi Exchange] (Aug 7, 2021)</ref>

	[https://web.archive.org/web/20190404015649/https://www.biki.com/ No Title] (Aug 7)		<ref name="bikiarchive-2272">[https://web.archive.org/web/20190404015649/https://www.biki.com/ No Title] (Aug 7, 2021)</ref>

	[https://cryptoxdirectory.com/hacked_2019 The 23 exchange hacks of 2019] (Aug 7)		<ref name="cryptoxdirectory-2276">[https://cryptoxdirectory.com/hacked_2019 The 23 exchange hacks of 2019] (Aug 7, 2021)</ref></references>

Azoundria: Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/bikipasswordtampering.php}} BiKiWhile details are vague, it appears that some customer accounts were breached, potentially a handful of accounts with SMS two-factor authentication. Funds were withdrawn from the accounts. BiKi has fully compensated the customers and improved security. This exchange or platform is based in Singapore, or the incident targeted people primaril..."

2023-01-25T02:58:56Z

Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/bikipasswordtampering.php}} thumb|BiKiWhile details are vague, it appears that some customer accounts were breached, potentially a handful of accounts with SMS two-factor authentication. Funds were withdrawn from the accounts. BiKi has fully compensated the customers and improved security. This exchange or platform is based in Singapore, or the incident targeted people primaril..."

New page

{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/bikipasswordtampering.php}}

[[File:Biki.jpg|thumb|BiKi]]While details are vague, it appears that some customer accounts were breached, potentially a handful of accounts with SMS two-factor authentication. Funds were withdrawn from the accounts.

BiKi has fully compensated the customers and improved security.

This exchange or platform is based in Singapore, or the incident targeted people primarily in Singapore.

== About BiKi ==
"Headquartered in Singapore, BiKi.com is a centralized exchange that provides a digital assets platform for trading more than 470 cryptocurrencies and 515 trading pairs. BiKi.com aims to provide the safest, most stable and most effective cryptocurrency trading platform. 100% of the transaction fees are reportedly used in buyback and burning of platform token, BIKI." "BiKi is also targeting an international audience, as it offers its platform in multiple languages, including Chinese, English, Russian, Vietnamese and Korean."

"Since its official opening in August 2018, BiKi.com is considered one of the fastest-growing cryptocurrency exchanges in the world." "BiKi.com claims to have accumulated 3.5 million registered users, 80,000 daily active users, over 3,000 community partners, and 1 million community members." "BiKi.com has received investments from Huobi co-founder Du Jun, Genesis Capital Zhu Huai Yang, FBG Capital, ChainUP and others totaling approximately 10 million USD." "The exchange offers USDT-denominated perpetual contracts that allow users to speculate on the price movements of Bitcoin, Ethereum, Bitcoin Cash, EOS, XRP and Litecoin."

"[I]t was reported that another Singapore-based crypto exchange BiKi has also encountered hijack attacks." "[C]rypto security firm SlowMist does list one incident involving BiKi, in which issues with the platform’s 2-factor authentication system caused a loss of 123,300 USDT." "Biki.com was hacked by side channel attack via SMS hijacking." "BiKi.com announced that at 0:08:23 on March 26, the BiKi.com community received a user feedback that his password has been tampered with and need to bind the new Google verification code. At around 5 in the morning, 28 users had the same problem, and the risk control system received an alarm." "At 3 pm on the same day, Biki said in the announcement that the number of accounts involved in tampering with passwords was 37, and the number of accounts involved in asset transfer was 18, and the amount of losses amounted to $123,300."

"At the time of the initial announcement, it was known that some users' accounts had been hijacked. This is not the case where the private key of the exchange is targeted, but the case where the user's customer account is targeted." "After investigation, it is because some users are not bound to Google verification code and third-party verification code service provider SMS is hijacked and caused. At present, the number of of accounts that have been tampered with passwords is 37, and the account involved in asset transfer is 18." From "the statement emphasizing "Please incorporate multi-factor authentication as well as the mobile phone verification code", it can be inferred that the mobile phone verification code, that is, the hijacking around SMS was performed." "BiKi has launched a subversive “mining, buying back, and destroying” model, where fees are used to repurchase the platform’s token, BIKI, and burn them. By destroying tokens, the company aims to increase the price of each individual token, as less tokens become available on the market."

"[T]he loss amount is 12.33 million USDT, the BiKi.com will bear the full amount of the loss." "According to the report, BiKi committed to refund the full amount to the affected users."

"At this point, the cause had been identified, and it probably took several hours to check the extent of the damage and recheck the security. The content announced after that also confirmed this, and it is stated that the account was hijacked via a third-party provider."

"In May 2019, BiKi.com announced the official appointment of its Southeast Asia CEO, Mr. Ethan Ng." "Apart from that incident, BiKi’s security record seems to be good with no other security breach reports. The exchange gives users the option to set up 2-factor authentication via Google Authenticator, or receive verification codes via SMS. Users also have to confirm certain operations through e-mails."

This exchange or platform is based in Singapore, or the incident targeted people primarily in Singapore.

The background of the exchange platform, service, or individuals involved, as it would have been seen or understood at the time of the events.

Include:

* Known history of when and how the service was started.
* What problems does the company or service claim to solve?
* What marketing materials were used by the firm or business?
* Audits performed, and excerpts that may have been included.
* Business registration documents shown (fake or legitimate).
* How were people recruited to participate?
* Public warnings and announcements prior to the event.

Don't Include:

* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
* Anything that wasn't reasonably knowable at the time of the event.
There could be more than one section here. If the same platform is involved with multiple incidents, then it can be linked to a main article page.

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
The specific events of the loss and how it came about. What actually happened to cause the loss and some of the events leading up to it.
{| class="wikitable"
|+Key Event Timeline - BiKi Password Tampering
!Date
!Event
!Description
|-
|March 26th, 2019 12:00:00 AM
|First Event
|This is an expanded description of what happened and the impact. If multiple lines are necessary, add them here.
|-
|
|
|
|-
|
|
|
|}

== Total Amount Lost ==
The total amount lost is unknown.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?

== Ultimate Outcome ==
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

== Total Amount Recovered ==
It is unknown how much was recovered.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?

== Prevention Policies ==
While the exact details are vague, it would appear that the authentication factors used SMS-based verification, which is known to be vulnerable to SIM swapping.

There were no user funds lost in this case.

== References ==
[https://hacked.slowmist.io/en/?c=Exchange SlowMist Hacked - SlowMist Zone] (Jun 25)

[https://www.businesswire.com/news/home/20200322005055/en/BiKi.com-Lists-Largest-Decentralized-Stablecoin-DAI BiKi.com Lists Largest Decentralized Stablecoin DAI | Business Wire] (Aug 6)

[https://coinmarketcap.com/exchanges/biki/ BiKi trade volume and market listings | CoinMarketCap] (Aug 6)

[https://blocking.net/464/how-hard-is-it-to-lose-money-on-the-exchange-and-how-to-recover-bitcoin-digital-assets/ How hard is it to lose money on the exchange and how to recover bitcoin digital assets? Blockchain Network] (Aug 6)

[https://news.8btc.com/dragonex-hacked-investigation-is-undergoing DragonEx Hacked, Investigation is Undergoing | NEWS.8BTC.COM] (Aug 6)

[https://www.reddit.com/r/Bitcoin/comments/bb2qkb/exchange_bikicom_was_hacked_by_side_channel/ Exchange Biki.com was hacked by side channel attack via SMS hijacking : Bitcoin] (Aug 6)

[https://support.biki.cc/hc/en-us/articles/360015039212 About Us – Help Center] (Aug 6)

[https://twitter.com/DoveyWan/status/1115286361253105664 @DoveyWan Twitter] (Aug 6)

[https://twitter.com/CoyotlCompany/status/1115527104022577152 @CoyotlCompany Twitter] (Aug 6)

[https://coincodex.com/review/9115/biki-review/ BiKi Review | CoinCodex] (Aug 7)

[https://twitter.com/roi_landmark/status/1110486702148059143 @roi_landmark Twitter] (Aug 7)

[https://twitter.com/FXxxx888/status/1110881923587407872 @FXxxx888 Twitter] (Aug 7)

[https://twitter.com/warai_relation/status/1111398122469482498 @warai_relation Twitter] (Aug 7)

[https://coinpost.jp/?p=76726 仮想通貨取引所「BiKi.com」の顧客口座乗っ取り　事例から見る対策手段【独自考察】] (Aug 7)

[https://blog.biki.com/biki-is-one-of-the-top-cryptocurrency-exchanges-of-2019/ BiKi is one of the top cryptocurrency exchanges of 2019 - BiKi Exchange] (Aug 7)

[https://web.archive.org/web/20190404015649/https://www.biki.com/ No Title] (Aug 7)

[https://cryptoxdirectory.com/hacked_2019 The 23 exchange hacks of 2019] (Aug 7)